Privacy Policy
Last updated: November 2, 2026
J&B Partner Solutions, Inc. ("J&B," "we," "us") provides the BotNotice™ service at botnotice.app. We are the controller for the information about our own account holders and website visitors described here. For the records BotNotice keeps about visitors to our customers' websites, the customer is the controller and we process that data for them, under our Data Processing Agreement.
Information we collect from account holders
Your email address, the domains and settings of sites you add, the answers you give in the AI profile, and billing information processed by Stripe (we never see full card numbers).
Information the widget collects from visitors to customer sites
When a disclosure is shown or acknowledged, the widget sends the site key, the event type, the page path and a random conversation ID to our servers. Where the website's chat shows its own conversation ID in the browser, the widget sends that ID too, so a record can be matched to that conversation; an ID that is an email address or phone number is kept only as a salted hash. Our servers derive a short, daily-rotating code from the visitor's IP address and browser, keyed with a secret only we hold, so repeat views can be counted; the IP address and browser string themselves are not stored. Country and region are recorded when provided by our hosting network. The widget does not set cookies, does not track visitors across sites, and does not collect names, messages or chat content. It keeps a few small entries in the browser (when the notice was last acknowledged, and for the open tab a conversation ID), listed on our sub-processors page.
For AI phone agents, we keep the platform's call ID, the call's times and whether the disclosure was spoken. A transcript a platform sends is read once to check the disclosure and is not stored. Consent records for AI calls keep a keyed hash of the phone number and its last four digits, never the full number.
Free scan reports
When you ask for the full report of a free scan, or enter your email to open a report we sent you, we keep your email address with that report, along with the website scanned, the answers given with the scan and what the scan found. We use your email to send you the report link and to follow up about it. If you tick the box for updates, we also send occasional emails about AI disclosure rules; without it, we don't. You can stop updates at any time by replying to one or emailing support@botnotice.app. Reports and the emails kept with them are deleted one year after the report was made, or sooner if you ask.
How we use information
To operate the service, produce logs and reports for the account holder, send sign-in links, billing emails, the scan reports people ask for and (on Managed Compliance) weekly law-change digests, and to improve the product. We do not sell personal information.
Service providers
Hosting and file storage (Vercel), database (Neon, a Databricks company), payments (Stripe) and email delivery (Resend). Each processes data only to provide its service to us. The full list, with what each one does and where: sub-processors.
Retention
On botnotice.app itself we count page views, the referring website and any campaign tag in the link, to see how people find us. We don't use cookies for this and don't store IP addresses; unique visitors are counted with a hash that changes every day. Your browser remembers the first campaign tag or referring website for 30 days, and if you create an account we note it on the account.
Disclosure records are kept for the account's retention period (7 years on plans with records, or a shorter period the account holder chooses) and deleted about 30 days after, together with their off-site copies, unless they are under a legal hold. When a site is deleted, its records and copies are deleted with it. Account data is deleted within 30 days of a request. Free scan reports and the emails kept with them are deleted after one year.
People in the EU, UK and Switzerland
We process account holders' data to provide the service you signed up for (performance of a contract), to keep billing records (legal obligation), and to secure and improve the service (our legitimate interests). We send a scan report because you asked for it, follow up about that report as our legitimate interest, and send update emails only with your consent, which you can withdraw at any time. Records about visitors to a customer's website are processed on that customer's instructions; questions about them are best sent to the website you visited, and we will help them answer.
Our servers and our providers are in the United States. Personal data transferred there from the EU, UK or Switzerland is protected by the European Commission's standard contractual clauses, with the UK addendum and Swiss adjustments, as set out in our Data Processing Agreement.
You can ask for access to, correction, deletion or a copy of your data, object to or restrict its processing, and complain to your data protection authority.
Your rights
You can access, correct, export or delete your account data by emailing support@botnotice.app. Residents of California, the EU/UK and other jurisdictions with privacy laws may exercise their statutory rights the same way.
Contact
J&B Partner Solutions, Inc., 6726 Lamar Ave, Overland Park, Kansas 66204, support@botnotice.app.